This is why you don't allow public-access to your add-on files (via server or something else). Otherwise, this is very possible to happen.
I've seen this kid before, he wanted me to give him my ms3d model files to "look at". I originally said I would, but eventually forgot about it and decided he should figure it out on his own.